This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * This program is free software; you can redistribute it and/or modify |
||
4 | * it under the terms of the GNU General Public License as published by |
||
5 | * the Free Software Foundation; either version 2 of the License, or |
||
6 | * (at your option) any later version. |
||
7 | * |
||
8 | * This program is distributed in the hope that it will be useful, |
||
9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
11 | * GNU General Public License for more details. |
||
12 | * |
||
13 | * You should have received a copy of the GNU General Public License along |
||
14 | * with this program; if not, write to the Free Software Foundation, Inc., |
||
15 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
||
16 | * http://www.gnu.org/copyleft/gpl.html |
||
17 | * |
||
18 | * @file |
||
19 | * @ingroup RevisionDelete |
||
20 | */ |
||
21 | |||
22 | /** |
||
23 | * Item class for a filearchive table row |
||
24 | */ |
||
25 | class RevDelArchivedFileItem extends RevDelFileItem { |
||
26 | /** @var $list RevDelArchivedFileList */ |
||
27 | /** @var $file ArchivedFile */ |
||
28 | /** @var LocalFile */ |
||
29 | protected $lockFile; |
||
30 | |||
31 | public function __construct( $list, $row ) { |
||
32 | RevDelItem::__construct( $list, $row ); |
||
33 | $this->file = ArchivedFile::newFromRow( $row ); |
||
0 ignored issues
–
show
|
|||
34 | $this->lockFile = RepoGroup::singleton()->getLocalRepo()->newFile( $row->fa_name ); |
||
0 ignored issues
–
show
It seems like
\RepoGroup::singleton()-...>newFile($row->fa_name) can also be of type object<File> . However, the property $lockFile is declared as type object<LocalFile> . Maybe add an additional type check?
Our type inference engine has found a suspicous assignment of a value to a property. This check raises an issue when a value that can be of a mixed type is assigned to a property that is type hinted more strictly. For example, imagine you have a variable Either this assignment is in error or a type check should be added for that assignment. class Id
{
public $id;
public function __construct($id)
{
$this->id = $id;
}
}
class Account
{
/** @var Id $id */
public $id;
}
$account_id = false;
if (starsAreRight()) {
$account_id = new Id(42);
}
$account = new Account();
if ($account instanceof Id)
{
$account->id = $account_id;
}
![]() |
|||
35 | } |
||
36 | |||
37 | public function getIdField() { |
||
38 | return 'fa_id'; |
||
39 | } |
||
40 | |||
41 | public function getTimestampField() { |
||
42 | return 'fa_timestamp'; |
||
43 | } |
||
44 | |||
45 | public function getAuthorIdField() { |
||
46 | return 'fa_user'; |
||
47 | } |
||
48 | |||
49 | public function getAuthorNameField() { |
||
50 | return 'fa_user_text'; |
||
51 | } |
||
52 | |||
53 | public function getId() { |
||
54 | return $this->row->fa_id; |
||
55 | } |
||
56 | |||
57 | View Code Duplication | public function setBits( $bits ) { |
|
58 | $dbw = wfGetDB( DB_MASTER ); |
||
59 | $dbw->update( 'filearchive', |
||
60 | [ 'fa_deleted' => $bits ], |
||
61 | [ |
||
62 | 'fa_id' => $this->row->fa_id, |
||
63 | 'fa_deleted' => $this->getBits(), |
||
64 | ], |
||
65 | __METHOD__ |
||
66 | ); |
||
67 | |||
68 | return (bool)$dbw->affectedRows(); |
||
69 | } |
||
70 | |||
71 | protected function getLink() { |
||
72 | $date = htmlspecialchars( $this->list->getLanguage()->userTimeAndDate( |
||
73 | $this->file->getTimestamp(), $this->list->getUser() ) ); |
||
74 | |||
75 | # Hidden files... |
||
76 | if ( !$this->canViewContent() ) { |
||
77 | $link = $date; |
||
78 | } else { |
||
79 | $undelete = SpecialPage::getTitleFor( 'Undelete' ); |
||
80 | $key = $this->file->getKey(); |
||
0 ignored issues
–
show
The method
getKey() does not seem to exist on object<OldLocalFile> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
81 | $link = Linker::link( $undelete, $date, [], |
||
82 | [ |
||
83 | 'target' => $this->list->title->getPrefixedText(), |
||
84 | 'file' => $key, |
||
85 | 'token' => $this->list->getUser()->getEditToken( $key ) |
||
86 | ] |
||
87 | ); |
||
88 | } |
||
89 | if ( $this->isDeleted() ) { |
||
90 | $link = '<span class="history-deleted">' . $link . '</span>'; |
||
91 | } |
||
92 | |||
93 | return $link; |
||
94 | } |
||
95 | |||
96 | public function getApiData( ApiResult $result ) { |
||
97 | $file = $this->file; |
||
98 | $user = $this->list->getUser(); |
||
99 | $ret = [ |
||
100 | 'title' => $this->list->title->getPrefixedText(), |
||
101 | 'timestamp' => wfTimestamp( TS_ISO_8601, $file->getTimestamp() ), |
||
102 | 'width' => $file->getWidth(), |
||
103 | 'height' => $file->getHeight(), |
||
104 | 'size' => $file->getSize(), |
||
105 | ]; |
||
106 | $ret += $file->isDeleted( Revision::DELETED_USER ) ? [ 'userhidden' => '' ] : []; |
||
107 | $ret += $file->isDeleted( Revision::DELETED_COMMENT ) ? [ 'commenthidden' => '' ] : []; |
||
108 | $ret += $this->isDeleted() ? [ 'contenthidden' => '' ] : []; |
||
109 | if ( $this->canViewContent() ) { |
||
110 | $ret += [ |
||
111 | 'url' => SpecialPage::getTitleFor( 'Revisiondelete' )->getLinkURL( |
||
112 | [ |
||
113 | 'target' => $this->list->title->getPrefixedText(), |
||
114 | 'file' => $file->getKey(), |
||
0 ignored issues
–
show
The method
getKey() does not seem to exist on object<OldLocalFile> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
115 | 'token' => $user->getEditToken( $file->getKey() ) |
||
0 ignored issues
–
show
The method
getKey() does not seem to exist on object<OldLocalFile> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
116 | ] |
||
117 | ), |
||
118 | ]; |
||
119 | } |
||
120 | if ( $file->userCan( Revision::DELETED_USER, $user ) ) { |
||
121 | $ret += [ |
||
122 | 'userid' => $file->getUser( 'id' ), |
||
123 | 'user' => $file->getUser( 'text' ), |
||
124 | ]; |
||
125 | } |
||
126 | if ( $file->userCan( Revision::DELETED_COMMENT, $user ) ) { |
||
127 | $ret += [ |
||
128 | 'comment' => $file->getRawDescription(), |
||
0 ignored issues
–
show
The method
getRawDescription() does not exist on OldLocalFile . Did you maybe mean getDescription() ?
This check marks calls to methods that do not seem to exist on an object. This is most likely the result of a method being renamed without all references to it being renamed likewise. ![]() |
|||
129 | ]; |
||
130 | } |
||
131 | |||
132 | return $ret; |
||
133 | } |
||
134 | |||
135 | public function lock() { |
||
136 | return $this->lockFile->acquireFileLock(); |
||
137 | } |
||
138 | |||
139 | public function unlock() { |
||
140 | return $this->lockFile->releaseFileLock(); |
||
141 | } |
||
142 | } |
||
143 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..